Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Atlassian Confluence Unauthenticated Remote Code Execution Vulnerability (CVE-2022-26134) Critical Atlassian Jira CVE-2012-2926 Vulnerability (CVE-2012-2926) Critical Atlassian Jira Deserialization of Untrusted Data Vulnerability (CVE-2017-5983) Critical Atlassian Jira Deserialization of Untrusted Data Vulnerability (CVE-2020-14172) Critical Atlassian Jira Improper Authentication Vulnerability (CVE-2022-0540) Critical Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1165) Critical Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-11581) Critical Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-20409) Critical Atlassian Jira Incorrect Behavior Order: Validate Before Canonicalize Vulnerability (CVE-2022-26136) Critical Atlassian Jira Incorrect Behavior Order: Validate Before Canonicalize Vulnerability (CVE-2022-26137) Critical ATutor Improper Authentication Vulnerability (CVE-2014-9753) Critical ATutor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-1000002) Critical ATutor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-2555) Critical ATutor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-1000004) Critical ATutor Improper Privilege Management Vulnerability (CVE-2017-1000003) Critical ATutor Incorrect Authorization Vulnerability (CVE-2019-16114) Critical Axway Secure Transport Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-14277) Critical b2evolution Improper Input Validation Vulnerability (CVE-2017-1000423) Critical b2evolution Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-5539) Critical b2evolution Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2016-8901) Critical b2evolution Use of Insufficiently Random Values Vulnerability (CVE-2022-30935) Critical Bash code injection vulnerability Critical Beego Framework CVE-2021-30080 Vulnerability (CVE-2021-30080) Critical Beego Framework CVE-2022-31259 Vulnerability (CVE-2022-31259) Critical Beego Framework Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-31836) Critical Broken access control in Confluence Server and Data Center (CVE-2023-22515) Critical Cacti Unauthenticated Command Injection (CVE-2022-46169) Critical Caddy Web Server Improper Authentication Vulnerability (CVE-2018-21246) Critical CakePHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-22727) Critical CData Jetty Path Traversal (CVE-2024-31848/CVE-2024-31849/CVE-2024-31850/CVE-2024-31851) Critical Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-1999019) Critical Chamilo Improper Handling of Case Sensitivity Vulnerability (CVE-2023-3545) Critical Chamilo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-3533) Critical Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35414) Critical Chamilo Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2023-34960) Critical Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-3368) Critical Chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-34187) Critical Chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-27423) Critical Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-13082) Critical Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-34944) Critical ChatGPT-Next-Web SSRF (CVE-2023-49785) Critical Check Point Gateway Path Traversal (CVE-2024-24919) Critical Cherokee Out-of-bounds Write Vulnerability (CVE-2019-20800) Critical Cisco IOS XE Web UI Authentication Bypass (CVE-2023-20198) Critical Cisco IOS XE Web UI Implant (CVE-2023-20198) Critical Citrix NetScaler Information Disclosure 'Citrix Bleed' (CVE-2023-4966) Critical CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541) Critical Claroline Other Vulnerability (CVE-2006-0411) Critical Claroline Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-37159) Critical Cleo Harmony/VLTrader/LexiCom RCE (CVE-2024-50623, CVE-2024-55956) Critical ClipBucket Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2018-7664) Critical ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-7666) Critical ClipBucket Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-7665) Critical CloudPanel file-manager Auth bypass (CVE-2023-35885) Critical Code Evaluation (Apache Struts) S2-016 Critical Code Evaluation (Apache Struts) S2-045 Critical Code Evaluation (ASP) Critical Code Evaluation (Perl) Critical Code Evaluation (PHP) Critical Code Evaluation (Python) Critical Code Evaluation (Ruby) Critical ColdFusion WDDX Deserialization RCE (CVE-2023-29300/CVE-2023-38203/CVE-2023-38204) Critical ColdFusion WDDX Deserialization RCE (CVE-2023-44353) Critical Collabtive Improper Privilege Management Vulnerability (CVE-2013-5027) Critical Command Injection Critical concrete5 Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-22958) Critical Contao Deserialization of Untrusted Data Vulnerability (CVE-2014-1860) Critical Contao Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-16558) Critical Contao Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-11512) Critical Contao Key Management Errors Vulnerability (CVE-2019-10643) Critical Contao Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-10641) Critical Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-27903) Critical Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-41892) Critical Craft CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-37843) Critical Craft CMS RCE (CVE-2023-41892) Critical 12345...20 2 / 20
